PT-2022-11793 · Zammad · Zammad

Published 2022-02-04 · Updated 2022-07-12 · CVE-2021-43145

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Zammad version 5.0.1

Description The issue allows for unauthorized access with existing user accounts under certain LDAP configurations.

Recommendations For Zammad version 5.0.1, update to a newer version that addresses the issue, as the current version allows unauthorized access with existing user accounts under specific LDAP configurations.

Fix

Related Identifiers

CVE-2021-43145

Affected Products

Zammad

References · 4

• https://osv.dev/vulnerability/CVE-2021-43145 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-43145 · Security Note
• https://zammad.com/de/advisories/zaa-2021-20 · Vendor Advisory
• https://t.me/cibsecurity/36858 · Telegram Post